Unscored severity · published Apr 13, 2013
CVE-2013-3051
The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset…
–
CVSS
0.2%
EPSS
No
On KEV
Description
The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the association between a certain physical-address argument and a memory region, which allows local users to unlock the bootloader by using kernel mode to perform crafted 0x9 and 0x2 SMC operations, a different vulnerability than CVE-2013-2596.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Android · Motorola
4.1.2 · source: NVD
AH
Atrix HD · Motorola
All versions, or not specified · source: NVD
MS
Msm8960 · Qualcomm
All versions, or not specified · source: NVD
RH
Razr HD · Motorola
All versions, or not specified · source: NVD
RM
Razr M · Motorola
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3051
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3051
Exploit
http://blog.azimuthsecurity.com/2013/04/unlocking-motorola-bootloader.html
www.droid-life.com
http://www.droid-life.com/2013/04/08/motorola-razr-hd-razr-m-and-atrix-hd-bootloader-unlock-released/
More from Android
7.8
CVE-2013-2596
Linux Kernel Integer Overflow Vulnerability
